542 matches found
DUware DUclassmate 1.x - default.asp?iState SQL Injection
DUware DUclassmate 1.x - default.asp?iState SQL Injection source: https://www.securityfocus.com/bid/14036/info DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
CVE-2005-1665
The VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service CPU consumption via deeply nested markup...
[SA15305] Booby Disclosure of Private Bookmarks
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Booby Disclosure of Private Bookmarks SECUNIA ADVISORY...
CVE-2004-1951
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the 1 audio.sunaudiodevice or 2 dxr3.devicename options in an MRL link...
CVE-2005-1095
CVE-2005-1095 affects Ocean12 Membership Manager Pro 1.x; the vulnerability is a reflected XSS in main.asp via the page parameter, enabling remote script/HTML injection. The root cause is insufficient sanitization of the page parameter. Per the provided documents, the vulnerability has a NVD CVSS...
CVE-2005-0814
Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors...
CVE-2005-0343
CVE-2005-0343 corresponds to a SQL injection in PerlDesk 1.x via the view parameter, enabling remote attackers to inject arbitrary SQL. Exploitation details in connected Nessus/NASL data indicate network-based, low-complexity access with no authentication, causing partial impact to confidentialit...
CVE-2005-0343
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter...
sugarCRM.txt
---------------------------------------------------------------------------- Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM ---------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basqu...
ipbSQL.txt
i have found an sql injection in the popular ipbproarcade mod for ipb systems 1.x and 2.x the vuln exists in the "category" field. buy using this field it is possible to inject any sql query and compemise the entire forum system p.o.c for ipb 1.x...
[SA13304] WinFTP Server Clear Text User Credential Disclosure
TITLE: WinFTP Server Clear Text User Credential Disclosure SECUNIA ADVISORY ID: SA13304 VERIFY ADVISORY: http://secunia.com/advisories/13304/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: WinFTP Server 1.x http://secunia.com/product/4318/...
[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability
TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...
[SA12439] TorrentTrader "id" SQL Injection Vulnerability
TITLE: TorrentTrader "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12439 VERIFY ADVISORY: http://secunia.com/advisories/12439/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, Manipulation of data WHERE: From remote SOFTWARE:...
CVE-2004-0663
CVE-2004-0663 affects PowerPortal 1.x, where a cross-site scripting (XSS) flaw exists in modules.php. The vulnerability enables injection of arbitrary script or HTML via (1) id in the private_messages module, (2) search in the links and content modules, and (3) files in the gallery module. These ...
CVE-2004-0662
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to 1 resize.php or 2 modules.php, which reveals the path in an error message...
SquidGuard 1.x - NULL URL Character Unauthorized Access
source: https://www.securityfocus.com/bid/9919/info Reportedly SquidGuard is prone to a remote NULL URL character unauthorized access vulnerability. This issue is due to a failure of the application to properly filter out invalid URIs. Successful exploitation of this issue may allow a remote...
MathoPD 1.x - Remote Buffer Overflow
MathoPD 1.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9871/info It has been reported that Mathopd is prone to a remote buffer overflow vulnerability. The issue arises due to a failure to check the bounds of a buffer storing user-supplied input. It may be possible for...
Roger Wilco 1.x - Client Data Buffer Overflow
Roger Wilco 1.x - Client Data Buffer Overflow / by Luigi Auriemma Use -DWIN to compile it on Windows UNIX & WIN VERSION / include include include ifdef WIN include include "winerr.h" define close closesocket else include include include include include endif define VER "0.2" define PORT 3782 defi...
keyfocus.txt
KeyFocus Web server is a Win32 HTTP server with web administration, a variety of logging formats, such as NCSA and W3C, CGI, compression, memory caching of static documents, directory indexing, pre-defined MIME settings, internal authentication with support for multiple realms, and a variety of U...
